Refactor to hosted HTTP + OAuth 2.1 transport

.env.example

@@ -1,3 +1,22 @@
-APPWRITE_API_KEY=
-APPWRITE_PROJECT_ID=
-APPWRITE_ENDPOINT=
+# Appwrite Cloud base endpoint. The served project's OAuth authorization server
+# lives under it at <APPWRITE_ENDPOINT>/oauth2/<APPWRITE_PROJECT_ID>.
+APPWRITE_ENDPOINT=https://cloud.appwrite.io/v1
+
+# External URL clients use to reach THIS MCP server. Used to build the canonical
+# resource URI (<MCP_PUBLIC_URL>/mcp) and RFC 9728 metadata.
+MCP_PUBLIC_URL=https://mcp.appwrite.io
+
+# The single Appwrite project this MCP serves. Defaults to the Cloud console
+# project; override only for non-console deployments. Tokens issued by any other
+# project's OAuth server are rejected.
+# APPWRITE_PROJECT_ID=console
+
+# HTTP bind address.
+HOST=0.0.0.0
+PORT=8000
+
+# ── Integration tests only (not used by the running server) ─────────────────
+# The live integration suite authenticates to the Appwrite API with an API key
+# and runs against APPWRITE_PROJECT_ID (above).
+# APPWRITE_PROJECT_ID=your-project-id
+# APPWRITE_API_KEY=your-api-key

.github/workflows/ci.yml

@@ -5,24 +5,29 @@ on:
   push:
 
 jobs:
-  format:
-    name: Format
+  lint:
+    name: Lint & format
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        with:
+          version: "0.11.22"
 
       - name: Install dev dependencies
         run: uv sync --group dev
 
+      - name: Lint
+        run: uv run --group dev ruff check src tests
+
       - name: Check formatting
         run: uv run --group dev black --check src tests
 
@@ -31,22 +36,34 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        with:
+          version: "0.11.22"
 
       - name: Install dependencies
         run: uv sync
 
       - name: Run unit tests
         run: uv run python -m unittest discover -s tests/unit -v
 
+  docker:
+    name: Docker build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out code
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
+      - name: Build hosted HTTP image
+        run: docker build -t appwrite-mcp:ci .
+
   integration:
     name: Integration
     runs-on: ubuntu-latest
@@ -57,15 +74,17 @@ jobs:
       APPWRITE_ENDPOINT: ${{ secrets.APPWRITE_ENDPOINT }}
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: "3.12"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        with:
+          version: "0.11.22"
 
       - name: Install dependencies
         run: uv sync --extra integration

.github/workflows/publish.yml

@@ -10,17 +10,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: "3.12"
 
       - name: Install build dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install build twine
+          pip install build==1.5.0 twine==6.2.0
 
       - name: Build package
         run: python -m build

Dockerfile

@@ -0,0 +1,22 @@
+FROM python:3.12-slim AS base
+
+ENV PYTHONUNBUFFERED=1 \
+    UV_COMPILE_BYTECODE=1 \
+    UV_LINK_MODE=copy
+
+WORKDIR /app
+
+COPY --from=ghcr.io/astral-sh/uv:0.11.22 /uv /usr/local/bin/uv
+
+COPY pyproject.toml uv.lock README.md ./
+COPY src ./src
+
+RUN uv sync --frozen --no-dev
+
+ENV HOST=0.0.0.0 \
+    PORT=8000 \
+    APPWRITE_ENDPOINT=https://cloud.appwrite.io/v1
+
+EXPOSE 8000
+
+CMD ["uv", "run", "mcp-server-appwrite"]